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Full formal descriptions of algorithms making use of quantum principles must take into 
account both quantum and classical computing components, as well as communications 
between these components. Moreover, to model concurrent and distributed quantum 
computations and quantum communication protocols, communications over quantum 
channels which move qubits physically from one place to another must also be taken into 
account. 

Inspired by classical process algebras, which provide a framework for modeling 
cooperating computations, a process algebraic notation is defined. This notation provides 
a homogeneous style to formal descriptions of concurrent and distributed computations 
comprising both quantum and classical parts. Based upon an operational semantics 
which makes sure that quantum objects, operations and communications operate 
according to the postulates of quantum mechanics, an equivalence is defined among 
process states considered as having the same behavior. This equivalence is a probabilistic 
branching bisimulation. From this relation, an equivalence on processes is defined. 
However, it is not a congruence because it is not preserved by parallel composition. 

1. Introduction 

The number of quantum programming languages is growing rapidly. These languages can 
be classified in three families: imperative, functional, and parallel and distributed. Among 
imperative programming languages, there are QCL (Omer 2000), designed by Omar, 
which aims at simulating quantum programs, and qGCL (Zuliani 2001) by Zuliani which 
allows the construction by refinement of proved correct quantum programs. QPL (Selinger 
2004) is a functional language designed by Selinger with a denotational semantics. Several 
quantum A-calculi have also been developed: for example (van Tonder 2003) by Van 
Tonder, based on a simplified linear A-calculus and (Arrighi and Dowek 2004) by Arrighi 
and Dowek, which is a " linear- algebraic A-calculus". Gay and Nagarajan have developed 
CQP, a language to describe communicating quantum processes (Nagarajan and Gay 
2004). This language is based on 7r-calculus. An important point in their work is the 
definition of a type system, and the proof that the operational semantics preserves typing. 

Cooperation between quantum and classical computations is inherent in quantum algo- 
rithmics. Telcportation of a qubit state from Alice to Bob (Bennett et al. 1993) is a good 
example of this cooperation. Indeed, Alice carries out a measurement, the result of which 
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(two bits) is sent to Bob, and Bob uses this classical result to determine which quantum 
transformation he must apply. Moreover, initial preparation of quantum states and mea- 
surement of quantum results are two essential forms of interactions between the classical 
and quantum parts of computations which a language must be able to express. Process 
algebras are a good candidate for such a language since they provide a framework for 
modeling cooperating computations. In addition, they have well defined semantics and 
permit the transformation of programs as well as the formal study and analysis of their 
properties. Their semantics give rise to an equivalence relation on processes. Bisimilarity 
is an adequate equivalence relation to deal with communicating processes since it relates 
processes that can execute the same flows of actions while having the same branching 
structure. 

This paper presents first the main points of the definition and semantics of a Quantum 
Process Algebra (QPAlg). Then, a probabilistic branching bisimilarity is defined among 
process states (section 3), this relation is proved to be an equivalence. As an example, 
in section 4, the application of the Hadamard unitary transformation is proved bisimilar 
with its simulation with measurement only, based on state transfer. Finally, in section 5, 
an equivalence relation among processes is defined. This relation is preserved by all the 
operators of QPAlg except parallel composition. 

2. Definition of QPAlg 

The process algebra QPAlg is based upon process algebras such as CCS (Milner 1989) 
and Lotos (Bolognesi and Brinksma 1987). The key aspects of QPAlg are developed in 
this section. The precise syntax and the main inference rules of the semantics are given 
in appendix A. For more details and more examples, see (Lalire and Jorrand 2004). 

2.1. Variables 

For the purpose of this paper, we consider two types of variables, one classical: Nat, 
for variables taking natural values, and one quantum: Qubit for variables standing for 
qubits. An extended version of the process algebra would of course also include quantum 
registers and other types of variables. 

In classical process algebras with value passing (Milner 1989; Bolognesi and Brinksma 
1987; Roscoe 1998), variables are instantiated when communications between processes 
occur and cannot be modified after their instantiation. As a consequence, it is not neces- 
sary to store their values. In fact, when a variable is instantiated, all its occurrences are 
replaced by the value received. 

Here, quantum variables represent physical qubits. Applying a transformation to a 
variable which represents a qubit modifies the state of that qubit. This means that 
values of variables are modified. For that reason, a process state must keep track of both 
variable names and variable states, this is achieved thanks to the context (cf. section 
2.5). 

Variables are declared using the following syntax: [ xi : ti, . . . , Xn ■ t„ . P ] where 
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Xi, . . . ,Xn is a list of variables, ti, . . . , <;„ are their types, and P is a process which can 
make use of these classical and quantum variables. 

2.2. Expressions 

The quantum expressions are quantum variables or tensor product of quantum variables, 
denoted xi (g) • • • (g) a:„. 

The classical expressions are usual classical expressions, and application of an admissi- 
ble transformation to a quantum expression. Admissible transformations are also called 
general quantum measurements, it includes unitary transformations. For more details, 
see (Nielsen and Chuang 2000). 

Let ^ be a set of predefined admissible transformations. The application of the admis- 
sible transformation A = {A^-^, . . . ,Ar^} G A, of dimension n, to the register of qubits 
Xi (S) ■ ■ ■ Xn is denoted A[xi (8) ■ • ■ (g) x„]. 

The quantum memory is stored in the context in the form q = p where q is the list of 
quantum variable names and p, a density matrix representing their quantum state (cf. 
section 2.5). If the classical result of A[xi O • ■ • (8)x„] is r^, then Ta^. is the super-operator 
which must be applied to the density matrix p, to describe the evolution of the quantum 
memory q ^ p. 

Ta^^ : p ^ nl{Ar^ (E) /®'=).n.p.nt.(4^ ^ /®fc).n 

where 

— n is the permutation matrix which places the Xi's at the head of q 

— k = s±ze{q) — n 

— j^k — / . . . (g, where / is the identity matrix on 

k 

Since the admissible transformation A^-- may be applied to qubits which are anywhere 
within the list q, a permutation 11 must be applied first. This permutation moves the cc^'s 
so that they are placed at the head of q in the order specified by xi, . . . ,Xn- Then Ar- 
can be applied to the first n elements and / to the remainder. Finally, the last operation 
is the inverse of the permutation 11 so that at the end, the arrangement of the elements 
in p is consistent with the order of the elements in q. 

A[xi (g" ■ ■ • fgi Xn] is not probabilistic but its evaluation produces a result with a proba- 
bilistic value. This value is stored in the context which becomes probabilistic (cf. section 
2.5). 

In the examples of this paper, the set A of admissible transformations is: 

A = {H, CNot, I, c7x,<JY,<Jz,Mstd.i,M,td,2,X, Z ® X} 

H is Hadamard transformation, CNot is "controlled not", / is the identity, and ax, <^Y , 
az are Pauli operators. Mstd,i and Mstd,2 correspond to measurement in the standard 
basis of respectively one and two qubits. X and Z®X are the admissible transformations 
corresponding to the measurements with the Pauli observables X and Z (g) X. 
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2.3. Basic actions 

The basic actions of QPAlg arc classical expressions and communications. A classical 
expression is interesting as a basic action if it has side effects, as it is the case of the 
application of an admissible transformation. 

There are several kinds of communications, depending on the type of the expression 
sent and the type of the receiving variable. The different kinds of communications are: 
classical to classical communications, classical to quantum communications for initializing 
qubits, and quantum to quantum communications for allowing the description of quantum 
communication protocols. Communication gates are not typed but we can imagine a 
subsequent version of QPAlg where communication gates would be declared with a fixed 
type like the other variables. 

Emission of an expression e from a gate g is denoted g !e , reception in a variable x 
is denoted g 7x . In the operational semantics of parallel composition (rules 15 to 20 
of the semantics given in appendix A. 2), the combination of the rules for emission and 
reception defines communication. In a classical to quantum communication (rule 17), the 
qubit is initialized in the basis state where v is the classical value sent (in this 

case, V must be or 1). In a quantum to quantum communication (rule 18), the name 
of the sent qubit is replaced in the context by the name of the receiving qubit. 

2.4. Composition operators 

To create a process from basic actions, the prefix operator " ." is used: if a is an action 
and P, a process, a.P is a new process which performs a first, then behaves as P. 
The predefined process nil cannot perform any transition. 

The operators of the process algebra are: parallel composition (P \\ Q), nondeterminis- 
tic choice {P + Q), probabilistic choice {P®pQ), conditional choice ([ ci — > Pi, . . . , c,i ^ 
P„ ]) and restriction {P\L ). The process [ ci — > Pi, . . . , c„ — > P„ ], where a is a condition 
and Pi a process, evolves as a process chosen nondeterministically among the processes 
Pj such that Cj is true. Restriction is useful for disallowing the use of some gates (the 
gates listed in L), thus forcing internal communication within process P. Communication 
can occur between two parallel processes whenever a value emission in one of them and 
a value reception in the other one use the same gate name. 

The process P®pQ behaves like P with probability p and like Q with probability 1—p. 
As explained in (Cazorla et al. 2001) and (Cazorla et al. 2003) and shown in the example 
of figure 1, if a process contains both a probabilistic and a nondeterministic choice, then 
the probabilistic choice must always be solved first. Otherwise, a probabilistic transition 
labeled with a probability p does not mean that this transition will be executed with 
probability p. 

To solve probabilistic choices before nondeterministic ones, the notion of stability for 
processes is defined. 

Definition 1. Probabilistic stability is defined by induction: 

1 nil, a.P, [ xi : ti, . . . Xn : t„ . P ] arc stable. 

2 P\L , [ xi : ti, . . . , Xn ■ tn ] • P[ai, . . . , On] arc stable if and only if P is stable. 
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Figure 1. Nondeterminism solved before probabilistic choice 

3 P + Q, P \\ Q are stable if and only if P and Q are stable. 

4 [ ci ^ Pi . . . Cn ^ Pn ] is stable if and only if for all i, Pi is stable. 

P stable is denoted P |. 

In the examples, another operator on processes is used: " ;" , for sequential composition. 
P ; Q behaves like Q once P has terminated. This require the introduction of a predefined 
process end, for signaling successful termination. The operator " ;" can be simulated with 
" II" : P ; Q behaves as (P || S7.Q)\{S} where (5 is a fresh gate name and with end'^^ Sl.nil. 

2.5. Contexts and process states 

In the inference rules which describe the semantics of processes, the states of processes 
are process terms P together with contexts C, of the form P/ C. The main purpose of a 
context is to maintain the quantum state, stored as q = p where <? is a sequence of quan- 
tum variable names and p a density matrix representing their current quantum state. In 
order to treat classical variables in a similar way, modifications of classical variables are 
allowed. So, for the same reason as in the case of quantum variables, classical values are 
stored in the context. Storing and retrieving classical values is represented by functions 
/ : names — > values. The context keeps track of the embedding of variable scopes. To 
keep track of parallel composition, this is done via a "cactus stack" structure of sets of 
variables, called the environment stack (s), which stores variable scopes and types. The 
set of all the variables in s is denoted Var(s), "." adds an element on top of a stack, and 
"I" concatenates two stacks. 

Definition 2. A context is a tuple < s,q — p, f >, where: 

— s is the environment stack; 

— g is a sequence of quantum variable names; 

— /5 is a density matrix representing the quantum state of the variables in q; 

— / is the function which associates values with classical variables. 

The evaluation of an admissible transformation (rule 2 of the semantics) produce a 
probabilistic result. This requires the introduction of a probabilistic composition operator 
for contexts. This operator is denoted Sip-, the state P/CifflpC2 is P/Ci with probability p 
and P/C2 with probability 1— p. In general, a context is either of the form < s, q ^ p, f >, 
or of the form fflp;< Si,qi = pi, fi > where the piS are probabilities adding to 1. 
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As in the case of probabilities introduced by the operator ©p, so as to guarantee that 
probabihstic choice is always solved first, the notion of probabilistic stability for contexts 
is introduced: a context C is probabilistically stable, which is denoted C J., if it is of 
the form < s,g = p, / >. If the context of a process state is not stable, a probabilistic 
transition must be performed first (rule 10 of the semantics). 

2.6. Example: teleportation 

The teleportation protocol (Bennett et al. 1993) transfers the state of a qubit in a place 

A into a qubit in a place B with only two classical bits sent from place A to place B: 
Once upon a time, there were two friends, Alice and Bob who had to 
separate and live away from each other. Before leaving, each one took 
a qubit of the same EPR pair. Then Bob went very far away, to a place 
that Alice did not know. Later on, someone gave Alice a mysterious 
qubit in a state \ip) = a\0) + with a mission to forward this state 

to Bob. Alice could neither meet Bob and give him the qubit, nor clone 
it and broadcast copies everywhere, nor obtain information about a 
and (3. Nevertheless, Alice succeeded thanks to the EPR pair and the 
teleportation protocol. 

This protocol is described with QPAlg in program 1. 

The inference rules can be used to show that this protocol results in Bob's z qubit 

having the state initially possessed by the x qubit of Alice, with only two classical bits 

sent from Alice to Bob. 

3. Probabilistic branching bisimilarity 

The operational semantics associates a process graph with a process state. A process 
graph is a set of transitions between process states, and an initial state (Fokkink 2000). 
The transitions are action transitions: S T where S, T are states, and a is an action 
(possibly the internal action t), or probabilistic transitions: 5* — >p T, where p is a 
probability. 

In this section, an equivalence relation on process states is defined: probabilistic branch- 
ing bisimilarity, which identifies states when they are associated with process graphs hav- 
ing the same branching structure. The bisimilarity defined here is probabilistic because 
of the probabilistic transitions introduced by quantum measurement and by the operator 
of probabilistic choice. The choice of a branching bisimilarity comes from the fact that it 
abstracts from silent transitions (contrary to strong bisimilarity), but is finer than any 
other equivalence taking into account silent steps (van Glabbeek 1993). 

This definition is inspired from the definitions in (Fokkink 2000) and (Andova 1999). 

3.1. Preliminary definitions and notations 

Process states The set of all possible process states is denoted S. Let S,T S §, then S 
can be written P/Cp and T, Q/Cq where P, Q are process terms and Cp, Cq contexts 
(possibly probabilistic) . 
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Program 1 Implementation of the teleportation protocol 

BuildEPR [x : Qubit,?; : Qubit ]• 

((51 7x .52 ??/ ■H[x].CNot[x,y].end) 
II (.91 !0 ,92 !0 .end))\{gi,g2} 



Alice = [ X : Qubit, y : Qubit ]• 

CNot[x,y].H[x].g \Mstd,2[x,y] .end 



Bob = [z : Qubit ]• 
f fc : Nat . 



glk . 

[ fc = ^ I[z].end, 
k = 1 ax[z]-end, 
fc = 2 ^ az[z]-end, 
k = 'i aY[z]-end] 



Teleport ^ [ : Qubit ]• 

[ a : Qubit, b : Qubit . 
BuildEPR[a, 6] ; 

(Alice[V',a] II Bob[fe])\{.g} 

] 



Assuming that S = P/Cp and Cp =< s, 9 = p, / >, if a; is an initialized qubit in 5*, 
i.e. {x, Qubit) G s and a; G 9, then is the state of x and this state can be obtained 
with a trace out operation on p: 

Px = Tr[^}/g{p) 

Silent transitions The transitions considered as silent are of course internal transitions 
( — ^ ) but also probabilistic transitions. The reason is that we want, for example, the 
states Si and 52 described in figure 2 to be equivalent. 




Figure 2. Equivalent states 



Silent transitions will be denoted stands for a sequence (possibly empty) of 

silent transitions, and •w''--^ stands for zero or one silent transition. 
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Figure 3. Non equivalent states 



Function ^ Let TZ be an equivalence on process states, S' be a process state and S, its 
equivalence class with respect to TZ. If M is a set of process states, then S t> M means 
that there exists a sequence of transitions remaining in M U S, from S* to a state in AI. 

A function fi-jz : § x P{§) [0, 1] is defined: fi-n : {S, M) p, where p is the probability 
to reach a state in the set M from a state S without leaving S U M. 

It should be noted that, for this function to yield a probability, nondeterminism must be 
eliminated in a way which allows the computation of /i. Here, nondeterminism is treated 
as equiprobability, but this is just a convention for the definition of nn- For example, this 
does not imply the equivalence of the two process states 5*1 and S2 described in figure 3. 

The function fi-ji is defined as follows: 

— if 5 e M then fiTi{S, AI) = 1 



else if 3 T e AI U S such that 5* 
AIUS\S — >p R>AI}iii 



miS,AI) 



E 

ReEs 



T\>M then let Es^{R(^ 



else if 3 T e A/ U S* such that S 
{ReMUS \ S R > M} in 

l^niS,Al) ^ 
else HTziS,AI) = 



Tt>AI then let Es = 



\Es 



J2 ^7^(i^,A/) 



R&Es 




3.2. Probabilistic branching bisimulation 

To define bisimilarity, the first step is the definition of a relation of bisimulation on 
process states. Contrary to the usual definitions of bisimulation, here, a bisimulation has 
to be an equivalence relation, because of the last point of the definition which ensures 
that the probability to reach an equivalence class is constant on each equivalence class. 

Definition An equivalence relation is a probabilistic branching bisimulation if and only 
if: 
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— if S and T are equivalent and if an action a can be performed 
from S, then the same action can be performed from T, possibly 
after several silent transitions; 

— the reached states (S" and T") are equivalent; 

— the action a must occur with the same probability in both cases. 
The probability to perform an action is the sum for all the 
branches leading to the action, of the product of the probabili- 
ties of each branch. It is calculated thanks to the function /i, d 
section. 

In the following, x, y denote variables and v denotes a classical 

Let B be an equivalence relation on process states. S is a probabilistic branching 
bisimulation if and only if it satisfies: 

— Value sending 

if SBT and S ^'-^ S' then 3 T', T" such that 

(T r -^"-^ T" A SBT' A S'BT") 

— Qubit sending 

if SBT and S S" then 3 T', T" such that 

(T r T" A = pf A SBT' A S'BT") 

— Value reception 

if SBT and S -^^^ S' then 3 T', T" such that 

(T ^* T' T" A SBT' A S'BT") 

— Qubit reception 

if SBT and S --^ S' then 3 T', T" such that 

(T T' T" A = A SBT' A 

— Silent transition 

if SBT and 5 S" then 3 T', T" such that 
(T ^* T' T" A ^BT' A S'BT") 

— Probabilities 

if SBT then iib{S, M) = /ie(T, M), VM eS/B 

Bisimulation and recursion Because of recursion in a process definition, the computation 
of in the associated process graph can lead to a linear system of equations. As a 
consequence, it must be proved that in this case, /ig is well-defined and that the system 
has a unique solution. 

Let 5 be a process state and M be a set of process states, the computation of fis (T, M) 
for all T in 5 leads to a linear system of equations where the fJ-isiT, M) are the unknowns: 

X = AX + B 

The i*^ row in this system can be written: Xi = anXi -I- • • • -I- ainXn + hi. 

The coefficients Oij and bi are either probabilities or average coefficients in the case 
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of nondeterminism. As a consequence: < < 1 and < 6i < 1. Moreover, in the 
definition of fiB, every state in the set Es is such that there exists a path from that state 
to the set M. Therefore, the system of equations obtained can be transformed into a 
system such that bi > 0, Vi G |l,n]. From now on, wc consider that the system verifies 
this property. 

Another property of the system is: < J2j o-ij + 1; thus < J2j ^ij < 1- 
To prove that the system has a unique solution, it is sufficient to prove \\A\\ < 1 and 
use the fixpoint theorem. The norms for matrices and vectors are: 

II All sup \\AX\\ \\X\\ = max\xi\ 
\\x\\=i 

Wc obtain: 

\\AX\\ = max | aijXi\ < max^(|ay-||a;i|) 

j j 

and then \\A\\ < max > |a.y| < 1 

j 

\\A\\ < 1 impUcs that the function f : X ^ AX + i? is strictly contracting, so from 
the fixpoint theorem, we infer that the equation X ~ AX + B has a unique solution. 
Moreover, as /([0, 1]) C [0, 1], this solution belongs to [0, 1]. 

As a consequence, the function /ig is well-defined even in the case of recursive processes. 

3.3. Probabilistic branching bisimilarity 

Definition 3. Two process states S and T are bisimilar, denoted S -t^ T ii and only if 
there exists a probabilistic branching bisimulation B such that SBT. 

Proposition 1. Probabilistic branching bisimilarity is an equivalence relation. 

Proof. 

Symmetry. S -t^ T implies that there exists a bisimulation B such that SBT. Since, B 

is an equivalence relation, TBS and then T S. 
Reflexivity. The identity relation T is an equivalence relation which verifies all the 

points of the definition of the probabilistic branching bisimulation. \/S 6 §, S* X S*, so 

Si±S. 

Transitivity. S -t^ T and T -t^V , docs S VI To prove it, wc have to find a bisimulation 
B such that SBT. 

S T and T i±V , so there exist two bisimulations Bi and B2 such that SBiV and 
VB2T (denoted SB1VB2T). 

Let Eq give the equivalence closure of a relation and o compose two relations: S{Bi o 
B2)T if and only if there exists V such that SB1VB2T . B — Eq(Si o B2) is an equiv- 
alence relation such that SBT, we prove that it is a bisimulation. 



Relations among Quantum Processes: Bisimilarity and Congruence 



11 



either S = T (reflexive closure) 
either 3V \ SB1VB2T 
SBT ^ cither 3V \ SB2VB1T (symmetric closure) 

cither 3V \ SBVBT with S{Bi oB2)V ov S{B2 oBi)V 
(transitive closure) 

We develop only the points concerning value sending and probabilities of the definition 
of a bisimulation, the other points are similar to those developed. 

Value sending. SBT and S ^ S' {a ^ g \v ), let's prove: 3 r',T" such that 
(T T T" A SBT' A S'BT"). 

Case S^T-.T = S and T" = S' . 

Case 3V \ SB1VB2T: Since SBiV, there exist V , V" such that V ^* V V" 
and SBiV and S'BiV". 

liV = V\ then VB2T imphes there exist T',T" such that (T T 
T" A VB2T' A V"B2T"). 

SBiV and VB2T' , so SBT'. S'BiV" and V'BzT", so S'BT". 

Otherwise V ^ Vi • • • V" — ^ V^'. By applying the point on 

silent transition of the definition of a bisimulation to the relation B2 with the 
successive V^, we obtain: 3 T' ,T" such that (T T' ^ T" A S'BT' A 
S'BT"). 

Case | SB2VB1T: idem previous case. 

Case 3y | SBVBT with ^(SioSz)!^ or S{B2oBi)V: by induction on the sequence 
of relations. 

Probabilities. Let {Ci]i^i, {Dj^j^j and {Mk}keK be the sets of equivalence classes 
of respectively Bi, B2 and B. 

For aU fc, Z in K, we prove that for all S,T & Mk, hb{S, Mi) = ^isiT, Mi). 
Firstly, we need to know the relations between the M^'s and the C^'s and Dj^s. 
If 5, T e Ci, then S G Mk implies T E M^, because SB1TB2T. As a consequence 
Vi G I, yk G K, Ci C Mfc or Ci D Mk = 0. Since the equivalence classes of an 
equivalence relation form a partition of the space considered, Mk = Uig/j. ^i- 
Similarly for B2'. Mk = UjeJ^. ^j- Moreover, for all 5, T in A/^-, there exists a 
path Fi, . . . , such that SB1V1B2V2B1 . . . B2VpBiT. 

Mk = U = U Mi^[ja^ [j Dj 

ieik jeJk leh jeJi 

Now, let's compute /ig as a function of /ig^ (cf. the example at the end of this 
section). Let S G Mk, there exists n such that S G C„. /^b(5, Mj) is the probability 
to reach AIi from S without leaving Mk U Mi, in other words, it is the sum of the 
probabilities to reach each Cj for j G /; without leaving Uie/fcU/j 
Since Si is a bisimulation, the probability to reach Cj from Ci is constant for all 
state in Ci, this probability will be denoted fi]3-^{Ci,Cj). 
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with /ig defined by: 

where = {m | m € Ik, and Cm » Cj}. 

This shows that the function S i-^ fiB{S,Mi) is constant on Ci, for aU i ^ 1^. 
Similarly, this function is also constant on Dj, for all j in J^.. 
With these properties: 

— if 5, T e C„, then Mi) = /ie(T, M,) 

— if 5, T e An, MB (5, A/i) = A^eCr, Mi) 

— else there exists {Vi, . . . ,Vp} such that Vi e C M^, 
and 5BiFiB2V"2i3i ■ • • B2VpBiT. 

iiB{S,Mi)^tiB{Vi,Mi), 
Hb{Vi,Mi)= fiB{V2,Mi), 

tiBiVp,Mi) = fiBiT,Mi) 
As a consequence, fj,B{S,Mi) = ^b{T,Mi). 

o 

Example of computation of /i^ as a function of /iT^^ . Figure 4 presents the equivalence 
classes on a process graph of two relations: TZ which equivalence classes are Mi and Mk 
and TZi with the Q's as equivalence classes. The arrows represent transitions of the 
process graph. 




Figure 4. Example of equivalence classes 
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Let 5* e Ci. 

MS, Ml) ^ finiS,Ci) + MS,C5) 
finis, C4:) //k(Ci,C4) 

AiTCi(Ci,C4) + M7^i(Cl,C2)/iTC(C2,C4) 
= /iKi(Ci,C4) +MKi(Ci,C2)mKi(C2,C4) 

MS,C5) = /iKi(Ci,C2)MKi(C2,C5) 

We obtain: 

fin {S, Ml ) ^ tim{Ci,Ci) + tim (Ci , C2 ) (C^ , C4) + mt^i (C^2 , C5 ) ) 
4. Example: "H its measurement-based simulation?" 

Quantum measurement is universal for quantum computation (Nielsen 2001). This means 
that every unitary transformation can be simulated using measurements only. We are 
interesting in proving with QPAlg that a unitary transformation and its measurement- 
based simulation behave the same way. We consider the case of the Hadamard transfor- 
mation H . 



4.1. Measurement-based simulation of H 

There exist several models of quantum computation via measurements only. We use the 
model based on state transfer defined by Perdrix in (Perdrix 2004) . 

The gate network in figure 5 describes a step of simulation of H. This simulation needs 
an auxiliary qubit initialized in the state |0), it consists in two measurements: one on two 
qubits with observable Z ^ X and the other on one qubit with observable X. X and Z 
are Pauli observables. This step simulates if up to a Pauli operator a. li a = I, H has 
been simulated, otherwise, a correction must be applied to the result. This correction 
consists in simulating a (Pauli operators are their proper inverses) in the same way as H 
has been simulated. The full simulation of H is given by the automaton on figure 6. The 
states SimulHad, ai, (T2 and (T3 represent a step of simulation of H and of the Pauli 
operators. 



I*)- 



1/4 . 



^,'■1/4 \^1/4 



SimulHad 



'■■■-■..,1/4 
qjHl*) 



Figure 5. A step of simulation of H 
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^^H|<t>) 

Figure 6. Full simulation of H 
4.2. Modelling with QPAlg 

Unitary transformation of Hadamard. The process Had applies the Hadamard transfor- 
mation on a qubit received from gate g and returns this qubit through gate h. 

Had'^^ [ X : Qubit . g Ix .H[x].h \x .nil] 



Simulation of Hadamard As for the process Had, the process SimulHad (program 2) 
begins by receiving a qubit x from gate g. Then the Hadamard transformation is simu- 
lated in the way described by the automaton shown in figure 6. At the end, the result is 
in y (and not x) which is sent through gate ft,, cr is a process simulating a Pauli trans- 
formation, the Pauli transformation simulated is specified by the parameter i in a[i,y]. 
The process a is not given, it is organized in a way similar to SimulHad. 



Program 2 Process for the simulation of H 



SimulHad 

[ y : Qubit, i : Nat . 

[ x : Qubit, m, n : Nat . 

g ?x . II initialization of x 

{p ly .end \\ p !0 .end)\{p} ; // initiahzation of y to |0) 
(gi \Z®X {x,y\.q2 \X\x\ .end || qi ?m .^2 •e?irf)\{q'i, 92} ; 
([ 

(m = lAn=l)^r!0 .end, 

(m = lAn=— l)^r!l .end, / / initialization of i 

(ra = —1 A n = 1) ^ r !3 .end, / / depending on 

(m = — lAn = —1) — > r!2 .end / / measurement results 
] II r ?i .end)\\r\ 

] ;o"[i,?/] ; // correction 

h ly .nil / / result sending 



The operational semantics associates with the processes Had and SimulHad (program 
2) in empty contexts the process graphs described in figure 7. 
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Figure 7. Process graphs of Had and SimulHad in an empty context 



4.3. Bisimilarity 

To prove that the apphcation of the Hadamard transformation and its measurement- 
based simulation have the same behavior, we prove that their modeUings in QPAlg are 
bisimilar, i.e. that there exists a bisimulation between Had and SimulHad in empty 
contexts. 

The process graphs of Had and SimulHad in empty contexts are given in figure 7. 
Ci, 6*2, C3 and C4 represents equivalence classes of an equivalence relation TZ on process 
states. This relation is a bisimulation, the main points of this proof are: 

— from each process state in Ci the transition g 7x can be performed, possibly after 
several silent transitions 

— from each process state in C2 the transition h Ix ot h \y can be performed, possibly 
after several silent transitions 

— when h Ix and h \y are performed, the states of x and y are the same 

— the probability to reach C3 from each state in C2 must be the same, which corresponds 
for any state S* in C2, to fi-jziS, C3) = 1 

As regards the last point, the computation of the function fi-jz on each state in C2 
leads to the system of equations in figure 8. We obtain Vi G {0, . . . , 3}, pi = 1, and then 
go = 91 = 92 = 1- From any state in the class C2, the probability to reach a state in the 
class C3 is 1. 

To conclude, there exists a bisimulation relation between the modelling of the appli- 
cation of Hadamard and the modelling of its measurement-based simulation. 
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Figure 8. Computation of the probabilities 
5. Is a congruence? 

A natural question about the bisimilarity defined in this section is: is it a congruence? 
In fact, this question does not make much sense since this relation is defined on process 
states (process and context) and there exist no composition operators on process states. 

There are two possibilities to make it a congruence, either the operators on processes 
are extended to operators on process states or a congruence on processes is defined from 
the bisimilarity relation on process states. 

We explore the second possibility. A relation ^ on processes is defined: if P and Q are 
two processes, P^Q^^'^C, P/C i± Q/C. 

Nonetheless, is not a congruence, as shown by the two following examples: 

H[x].g \x .nil ^ g Ix .nil 
but H[x].g \x .nil+ h !2 .nil 9^ g \x .nil+ h !2 .nil 

H[x].g \x .nil ^ g \x .ni/©o.3<7 ^-^ 
but H[x\.g \x .nil+ h !2 .nil 9^ (g \x .nil (B0.3 g Ix .nil) + h 12 .nil 

To overcome these problems, probabilistic rooted branching bisimulation and proba- 
bilistic rooted branching bisimilarity arc defined. 

Definition 4. Let B be an equivalence relation. S is a probabilistic rooted branching 
bisimulation if and only if: 

— if SBT and S ^ S' {a ^ g \v or g Iv or r) then T ^ T with S' t± T 

— if SBT and S 5", then T T' with = and 5" i± T 

— if SBT and S S' , then T - ^-^ T with pf = p^' and S' i± T' 

— if SBT and S — >j, S", then T — >q T' with S'BT' 
^ if SBT then p.^{S, M) = p^{T, M), VM e §/ ±i 



Definition 5. Two process states S and T are probabilistic rooted branching bisim- 
ilar, denoted S T, if and only if there is a probabilistic branching bisimulation B such 
that SBT. 
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Proposition 2. t^,. is an equivalence relation. 

Proof. From the fact that ±i is an equivalence relation. o 
Note. For aU 5, T in S: T implies S ±^ T 

Definition 6. Let P and Q be two processes. 

Pr~.Q^yC,P/C i±r QIC 

Proposition 3. ^ is an equivalence relation and is preserved by variable declaration, 
action prefix, nondcterministic choice, probabilistic choice, conditional choice and restric- 
tion. 

Proof. Since is an equivalence relation, it is easy to see that ~ is also an equivalence 
relation. 

Let P, Q be processes such that P Q, that is to say VC, P/C Q/C. 

Action prefix. Let a be an action. The question is: are a. P/C and a.Q/C probabilis- 
tically rooted branching bisimilar for all context C? 

If C is probabihstically stable: a.P/C P/C and a.Q/C Q/C. P/C 
Q/C imphes P/C ±i Q/C. B = {{a.P/C, a.Q/C)} is a probabilistic rooted branch- 
ing bisimulation. 

If C = Sp,, d: for aU i, a.P/C — >p^ a.P/C and a.Q/C — a.Q/C. From the 
previous case, V i: a.P/Ci a.Q/Ci, we deduce a.P/C a.Q/C. 
Nondeterminism. Let i? be a process. The question is: are P + R/C and Q + R/C 
probabilistic rooted branching bisimilar, for all context C? 

If C is probabihstically stable: U P + R/C --^ P'/Cp then, as P/C i±r Q/C, there 
exists Q'/Cq such that Q + R/C — ^ Q'/Cq and P'/Cp t± Q'/Cq. Otherwise P + 
R/C R'/C" then, Q + R/C R' /C" and R' /C" R'/C". 
If C is not probabilistically stable, we reduce the problem to the previous point after 
a probabilistic transition. 

The other points are similar to those developed. o 

We conclude that ~ is preserved by all operators except ||, as shown by the following 
example: (g !2 .h !3 .nil \\ g ?x .h 7x .nir)\{g, h} ~ (h !3 .nil \\ h 7x .nH)\{h} , nonetheless, 
(g !2 .h !3 .nil \\ g 7x .h ?x .nil)\{g, h} \\ k \x .nil ^ (h !3 .nil || h 7x .nil)\{h} \\ k \x .nil. 
The left process can send 2 or 3 through gate k whereas the right process can only send 
3. 

This problem could be overcome by restricting processes in parallel not to use the same 
variable names. This is done in CQP (Nagarajan and Gay 2004) and can be justified by 
the fact that variables cannot be at two places at the same time. However, because of 
entanglement in the quantum state, this does not solve the whole problem: 

Mstd,i[x].nil ^ /[x].(0.ni/©o.5 l.nil) 
Mstd,i[x].nil II g \y .nil {I[x]. {0. nil (Bo.5 ^.nil)) || g ly .nil 

In a configuration where the state of x and y is ^(|00) + |11)) (EPR state), the left 
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process can send the qubit y in the mixed state {0.5 : |0),0.5 : |1)} through gate g if 
Mstd,i[x] has not been apphed, or in the states |0) or |1) if the measurement has been 
apphed, whereas the right process can only send y in the state {0.5 : |0),0.5 : |1)}. 

6. Conclusion 

This paper has presented a process algebra for quantum programming which can de- 
scribe both classical and quantum programming, and their cooperation. This language 
has an operational semantics, one of its peculiarities is the introduction of probabilistic 
transitions, due to quantum measurement and to the operator of probabilistic choice. 

Then a semantical equivalence relation on process states has been defined. This equiv- 
alence is a bisimulation which identifies processes associated with process graphs having 
the same branching structure. From this bisimulation, an equivalence relation on pro- 
cesses has been defined. This relation is preserved by all the operators of the process 
algebra except parallel composition. This is a first step toward the verification of quan- 
tum cryptographic protocols. 

Several extensions are possible. As already mentioned, we could define a congruence on 
process states from the bisimulation defined here by extending the operators on processes 
to operators on process states. Another possible extension is the definition of a type 
system to verify statically properties such as the no-cloning theorem (quantum variables 
cannot be copied). 
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Appendix A. The quantum process algebra 
A.l. Syntax 
Expressions 

qexp ::~ qvar ® qexp \ qvar 



nexp 
nfact 
nterm 



nfact + nexp \ nfact — nexp \ nfact 
nterm X nfact \ nterm nfact \ nterm 
nvar \ nval \ transf_admissible [ qexp ] 
( nexp ) I —nterm 



Actions 

communication 

action 



gate ! variable \ gate ! nexp 
gate ? variable 
communication \ nexp 



Processes 

type 

variable_decl 



Nat I Qubit 

variable : type {, variable : type }* 



process 



:= nil 

I name {[ variable_list ]} 



M. Lalire 



20 



param_decl • process [ variablejist ] 
[ variable-decl . process ] 
action . process 
process \\ process 
process + process 

[ condition — > process {, condition — > process }* ] 
process {©probability process]+ 
process \{ gateJist } 



param_decl ::= [ variablc-decl ] 

process-decl ::— name = process \ nom = param_aecl • process 



A. 2. Main inference rules of the semantics 

The semantics is specified with inference ruies which give the evoiution of the states of 
processes. There are five kinds of transitions: 

— transitions for evaluating expressions: — >^ and — >e 

— action transitions: > where a \s g \x or g Ix ; 

— silent transitions: , for internal transition; 

— probabilistic transitions: — >p, where p is a probability. 

In the following, P, Q, P', Q', Pi and P/ are processes, C, C and Ci are contexts, a is 
an action, is a communication gate, f is a value, x is a variable, and Cj is a condition. 

Expressions 

— — X e dom(/) (1) 

x/ < s,q^ pj > — >y f[x)/ < s,q^ pj > 



A[xi (g) . . . ® Xn]/C — >y y/ fflp. Ci 

avec 

— A = {^Ti , • • • , At,^}, admissible transformation 

— y, fresh variable name 

— C =< e.s,q = p,f> 

— Ci =< {{y : Nat} U e).s, q = pi, f L) {y ^ n} > 

— Xl , . . . , Xn G Q 

— p^ = Tr{TA^^ (p)) and p^ = ^^A^, ip) 

Evaluation contexts E[] is an evaluation context of an expression, it is an expression in 
which a sub-expression has been replaced by [ ]. Similarly, F[ ] is an evaluation context 
of a process. 
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e/C -^e e'/C 
F[e]/C F[e']/C" 



Action Prefix 
Communication. 



g Iv .P/C ^'-^ P/C 



g \x .P/C P/C 



C =< s,q = p, f > and x G q 



For all V e N: 



g Ix .P/C P/C 



with C =< s,q ^ p, f >, C =< s,q ^ p, f \J {x ^ v] > and (x, Nat) £ 
For all density matrix v of dimension 2: 



g Ix .P/C - ^^^ P/C 



with 

— C ~< s,q = p, f >, C =< s, x.q = V ® p, f > 

— (x, Qubit) G s and x ^ q 

Expression. 

velN 

v.P/C P/C 

Probabilities 

P/ fflpj Cj >p- P/Ci 



®Pj -fj/C Pi/C 
Nondeterministic choice 

P/C --^ P'/C 



P + Q/C P'/C 
where represents any transition. 
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P/C P'/C QIC — Q'lC" 

P+Q/C ^pqP' + Q'IC ^ ' 

Parallel composition In the rules for parallel composition, C , Cp and Cq are defined as: 

— C =< (sp II sq).s, p,f > 

— Cp =< sp\s, q = p,f > 

— Cq =< SQ\s,q = p,f > 

In the definition of C, the operator || permits to build a cactus stack (see paragraph 
2.1). In the cactus stack (sp || sq).s of the process P \\ Q, the names in s correspond to 
variables shared by P and Q whereas the names in sp (resp. sq) correspond to variables 
declared in P (resp. Q). 

PlQl (15) 

P II QIC . P' II QIC 

where 

— If Cp =< s',q' = p'J' > then C =< (s'p || sg).s,g' = p' , f > with s'p such that 
s' = s'p\s [P can neither add to nor remove variables from s) 

^liC'p^ fflp.< s[,q[ ^ p[J[ > then C = fflp,< (sp^ II SQ).s,q'^ = p'^Ji > with sp'^ 
such that — spi|s 



p/cp ^ pyc^ g/CQ ^ Q7c^ 

P II Q/c ^ P' II Q'/c ^'^^ ^ ^ 

where v e M, Cq =< s',q' = p', /' >, and C" =< (sp || sq).s, q = p, f > 



P/Cp P'/C'p Q/Cq QVC^ 

P II Q/C ^ P' II Q'/C 

where 

— (.T, Qubit) e sU Sq, X ^ q, V e {0, 1} 

— C" =< (sp II SQ).s,x.g= K')(w| > 

P/Cp P'/C'p Q/Cq Q'/C'q 

P II Q/C ^ P' II Q'/C" 

where 

— (x, Qubit) esUsp,xG(7 

— (y, Qubit) e s U SQ, 2/ ^ g 

^ C =< ((sp II SQ).s)\{a;}, g[x ^ y] = p, / > 



P/Cp pyc 
p II o/c P' II o/c 



(17) 



PlQi (18) 



(19) 



Relations among Quantum Processes: Bisimilarity and Congruence 
P/Cp -^p P'/C'p Q/Cq Q'/C'q 

P II QIC ^pg P' II Q'/C 



